Re: check_http fails to redirect to secure sites

Thomas:

 

Thanks for investigating.  It sounds like you already understand the
problem.  Do you think it's a load balancer they have sitting in front of
their site?

 

I agree, there are few sites that work this way, but if you would be willing
to make check_http a bit more flexible you could get it thoroughly against
Sprint's site. =)  

 

Frank

 

From: Thomas Guyot-Sionnest [mailto:[email protected]] 
Sent: Tuesday, March 06, 2012 12:29 AM
To: Nagios Plugin Development Mailing List
Cc: Frank Bulk
Subject: Re: [Nagiosplug-devel] check_http fails to redirect to secure sites

 


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 12-02-23 11:28 PM, Frank Bulk wrote:
> 



      > Starting this morning two of the sites I monitor failed, 



      > www.sprint.net  <http://www.sprint.net> <http://www.sprint.net> and

      www.sprintv6.net 



      >  <http://www.sprintv6.net> <http://www.sprintv6.net>. After some
testing it?s

      become clear to



      > me that check_http doesn?t currently redirect to secure

      sites, even



      > with the use of the '-f follow' command. I guess Sprint

      turned on



      > redirection to the secure version this morning.



      > 



      > Not sure whether to call this a bug or working-as-designed,

      but I?m



      > request the follow feature be enhanced to allow redirection

      to the



      > secure version of host.



      > 



      > I'm running check_http version 1.4.15.



      > 



      > Here's a copy of my tests:



      > 



      >

============================================================================
==



      >



      >



      > 
nagios:/etc/nagios3#
> 



      > nagios:/etc/nagios3# /usr/lib/nagios/plugins/check_http -H

      



      > www.sprint.net  <http://www.sprint.net> <http://www.sprint.net> -4



      > 



      > CRITICAL - Socket timeout after 10 seconds



      > 



      > nagios:/etc/nagios3#



      > 

This actually has to do with www.sprint.net not honoring the
"Connection: close" header and leaving the socket open. check_http
currently doesn't rely on the "Content-Length:" header to determine
when the request is complete, it rather insert a "Connection: close"
header in the request and wait for the remote server to close the
socket - if the remote leaves the connection open check_http times out.

So that could be a feature request - however there is so few
devices/webservers working this way that I'm wondering if it's even
valid according to the RFC's - I'd have to check.

Thanks

- -- 
Thomas
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk9VrooACgkQ6dZ+Kt5Bcha7CgCdEGXPcgZySOaujHWb0dIxM4MC
LecAoOJgT1s7v1yywnv6smDLmZjbnQda
=dmWt
-----END PGP SIGNATURE-----

------------------------------------------------------------------------------
Virtualization & Cloud Management Using Capacity Planning
Cloud computing makes use of virtualization - but cloud computing 
also focuses on allowing computing to be delivered as a service.
http://www.accelacomm.com/jaw/sfnl/114/51521223/

_______________________________________________________
Nagios Plugin Development Mailing List Nagiosplug-devel-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org
Unsubscribe at https://lists.sourceforge.net/lists/listinfo/nagiosplug-devel
::: Please include plugins version (-v) and OS when reporting any issue. 
::: Messages without supporting info will risk being sent to /dev/null